Changeset 250264 in webkit
Legend:
- Unmodified
- Added
- Removed
-
trunk/JSTests/ChangeLog
r250250 r250264 1 2019-09-23 Mark Lam <mark.lam@apple.com> 2 3 Lazy JSGlobalObject property materialization should not use putDirectWithoutTransition. 4 https://bugs.webkit.org/show_bug.cgi?id=202122 5 <rdar://problem/55535249> 6 7 Reviewed by Yusuke Suzuki. 8 9 * stress/lazy-global-object-property-materialization-should-not-putDirectWithoutTransition.js: Added. 10 1 11 2019-09-23 Caio Lima <ticaiolima@gmail.com> 2 12 -
trunk/Source/JavaScriptCore/ChangeLog
r250262 r250264 1 2019-09-23 Mark Lam <mark.lam@apple.com> 2 3 Lazy JSGlobalObject property materialization should not use putDirectWithoutTransition. 4 https://bugs.webkit.org/show_bug.cgi?id=202122 5 <rdar://problem/55535249> 6 7 Reviewed by Yusuke Suzuki. 8 9 * runtime/JSGlobalObject.cpp: 10 (JSC::JSGlobalObject::init): 11 1 12 2019-09-23 Mark Lam <mark.lam@apple.com> 2 13 -
trunk/Source/JavaScriptCore/runtime/JSGlobalObject.cpp
r250025 r250264 599 599 init.setStructure(JS ## type ## Array::createStructure(init.vm, init.global, init.prototype)); \ 600 600 init.setConstructor(JS ## type ## ArrayConstructor::create(init.vm, init.global, JS ## type ## ArrayConstructor::createStructure(init.vm, init.global, init.global->m_typedArraySuperConstructor.get(init.global)), init.prototype, #type "Array"_s, typedArrayConstructorAllocate ## type ## ArrayCodeGenerator(init.vm))); \ 601 init.global->putDirect WithoutTransition(init.vm, init.vm.propertyNames->builtinNames().type ## ArrayPrivateName(), init.constructor, static_cast<unsigned>(PropertyAttribute::DontEnum)); \601 init.global->putDirect(init.vm, init.vm.propertyNames->builtinNames().type ## ArrayPrivateName(), init.constructor, static_cast<unsigned>(PropertyAttribute::DontEnum)); \ 602 602 }); 603 603 FOR_EACH_TYPED_ARRAY_TYPE_EXCLUDING_DATA_VIEW(INIT_TYPED_ARRAY_LATER)
Note:
See TracChangeset
for help on using the changeset viewer.